Can CGNAT cause NAT Type 3 on PS5?

Yes. Behind CGNAT the PS5 usually reports NAT Type 3, and forwarding ports on your router does not change it. A public IP from the ISP or a VPN router with Moderate NAT or port forwarding does.

Why is my Xbox NAT Strict with CGNAT?

The ISP’s NAT drops incoming connections before they reach your router, so UPnP cannot open them. Fix it with a public IP from the ISP, or put the Xbox behind a VPN router that loosens NAT.

How do I bypass CGNAT for gaming?

Ask your ISP for a public IPv4. If that is not possible, use a VPN with Moderate NAT, such as Proton, or with port forwarding, such as PureVPN, on your PC or on a router for consoles.

Does any VPN fix CGNAT for gaming?

No. A normal VPN keeps a strict NAT on its own server. You need a VPN that offers Moderate NAT or port forwarding. NordVPN, for example, does not offer port forwarding.

Will my ISP remove CGNAT if I ask?

Some ISPs do it free on request, some charge for a public or static IP, and many 4G, 5G, satellite and fixed-wireless providers cannot offer it at all. It is always worth asking first.

Can I host a game server behind CGNAT?

Not directly, because players cannot reach you. Use a VPN with port forwarding so they connect to the VPN address, or a public IP from the ISP.

Back to Blog

Guide

6 min readOct 31, 2026

CGNAT and Gaming: Why You Get Strict NAT and How to Bypass It

CGNAT gives your console Strict NAT, NAT Type 3 or NAT D, and router port forwarding stops working. How to check for CGNAT, what it breaks on PS5, Xbox, Switch and PC, the free fixes, and the VPN setups that get Moderate or Open NAT.

Quick Answer

Yes, CGNAT affects gaming. Your ISP shares one public IPv4 between many customers, so other players cannot connect to you: consoles show Strict NAT, NAT Type 3 or NAT D, and party chat, invites and hosting fail. UPnP and port forwarding on your router do not help, because the block sits at the ISP. Ask your ISP for a public IPv4 first. If it refuses or cannot, use a VPN with Moderate NAT (Proton) or port forwarding (PureVPN), on the PC or on a router for consoles.

Check for CGNAT Free fixes Bypass CGNAT with a VPN

Yes, CGNAT affects gaming. Your ISP puts you behind a NAT you cannot control, so other players cannot connect to you. Consoles show Strict NAT, NAT Type 3 or NAT D, party chat drops, invites fail and you cannot host.

The worst part: UPnP and port forwarding on your router stop working, because the block sits at your ISP. EA puts it plainly for Battlefield 6: under carrier-grade NAT, port forwarding won’t work. You have two real fixes. Get a public IP from your ISP, or use a VPN that gives you a NAT you can open.

Are You Behind CGNAT? 1-Minute Check

Open your router’s status page and note the WAN (internet) IP.
Compare it with the public IP a website shows you.
WAN IP between 100.64.0.0 and 100.127.255.255, or different from your public IP: you are behind CGNAT.
Same address: no CGNAT. Your Strict NAT comes from double NAT, UPnP or a firewall.

The NAT type test shows what your connection allows, and how to check CGNAT covers every router.

By platform

What CGNAT Does to PS5, Xbox, Switch and PC

Platform	Usual NAT result	What breaks
PlayStation 5 / PS4	NAT Type 3, sometimes Type 2	Party chat, joining friends, some peer-to-peer matches
Xbox Series X\|S / One	Strict or Moderate, often with Teredo errors	Party chat, invites, hosting and some multiplayer games
Nintendo Switch / Switch 2	NAT Type D or F	Online play with other players, especially peer-to-peer games
PC (Steam, Battle.net, EA app)	Strict NAT in games that report it	Hosting lobbies, voice chat, peer-to-peer connections

Ping inside a match usually stays the same, because most big shooters run on dedicated servers. CGNAT hurts the parts that need a direct connection between players: parties, voice, invites, lobbies and peer-to-peer games such as many fighting and co-op titles.

Free Fixes First: What Works and What Doesn’t

Ask your ISP for a public IPv4

Free on some ISPs, a paid add-on on others, impossible on many 4G/5G, satellite and fixed-wireless plans. Ask for a “public IP” or to be taken off CGNAT.

Rule out double NAT at home

Two routers in a row also cause Strict NAT. Put the ISP box in bridge mode. It fixes double NAT, but not the ISP’s CGNAT.

UPnP and port forwarding

Still worth turning on, but under CGNAT they only open ports on your own router. The ISP’s NAT keeps blocking incoming connections.

If your ISP gives you a public IP, take it and stop here. If it refuses, charges business-plan prices or cannot do it on your connection type, a VPN is the only way to get Moderate or Open NAT. See what a static IP costs for typical ISP prices.

When the ISP says no

Bypass CGNAT for Gaming With a VPN

With a VPN, the NAT that matters moves from your ISP to the VPN server. Pick a VPN that loosens that NAT or opens ports on it. Normal VPNs keep Strict NAT and fix nothing.

Strict → Moderate in one setting

Proton VPN

Paid plans include Moderate NAT on Windows, macOS, Linux, Android and iOS, and in manual WireGuard or OpenVPN setups for a router. Proton says it can fix joining, hosting and voice problems in multiplayer games.

Windows: Settings → Connection → Advanced settings → NAT type → Moderate (Type 2)
Works in manual WireGuard/OpenVPN configs, so a router can cover a console
Cannot be combined with Proton port forwarding
30-day money-back guarantee

−75%

Black Friday

2-year plan

Get Moderate NAT With Proton VPN

Can open all ports

PureVPN

The port forwarding add-on can open every port on the VPN address, or chosen ports such as 3074, so games see incoming connections as they would on a public IP.

Open all ports, or forward specific ports
Works over OpenVPN, so it can run on a router for PS5 or Xbox
Optional dedicated IP keeps the same address
31-day money-back guarantee

−87%

Black Friday

5-year plan·$1.69/mo ~~$12.95/mo~~

Get Open NAT Behind CGNAT With PureVPN

This page contains affiliate links. If you sign up through them, NAT Checker may earn a commission at no extra cost to you.

Moderate is enough for parties and most matchmaking. Open NAT matters if you host lobbies or play peer-to-peer games with Strict players. Consoles cannot run VPN apps, so use a VPN router. Some games do not support VPNs officially; EA, for example, will not troubleshoot network errors that happen on a VPN.

Troubleshooting

Still Strict After the Fix?

Still Strict after the VPN connects

On Proton, check that NAT type is set to Moderate before you connect. On PureVPN, check the port forwarding add-on is active for that server.

Console still shows Type 3

The console is not behind the VPN. Run the VPN on the router, or share a PC’s VPN connection to the console by Ethernet.

Higher ping on the VPN

Every VPN adds a hop. Use the nearest server and WireGuard; only use the VPN when NAT matters.

The ISP says you are not on CGNAT

Compare the router’s WAN IP with your public IP. If they match, look for double NAT or a firewall instead.

Sources (checked October 31, 2026):

• RFC 6598: Shared Address Space for CGN (100.64.0.0/10)
• EA: Battlefield 6 connection error 1:86001S port forwarding guide (CGNAT on 4G/5G, VPNs not officially supported)
• Proton VPN: Moderate NAT
• PureVPN: Port forwarding add-on

CGNAT Gaming FAQ

Yes. CGNAT blocks incoming connections, so consoles and PC games report Strict NAT, NAT Type 3 or NAT D. Party chat, invites, hosting and peer-to-peer matches suffer the most.

Usually not much. Matches on dedicated servers run at your normal ping. CGNAT mainly breaks direct player-to-player connections, not the route to game servers.

Share this article